$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: d2hHY3nltOz7vZ1r6ebSjXq+1L3Geu8JY+BxKUNpRj4= Subject key identifier: EC:E1:96:CD:35:E4:82:4A:21:9C:B3:18:F2:B2:54:2A:B1:D6:C3:1C Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 1CFE0F7A8723304AAB94304F5DFD073C58F8DBBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 01FF Signing time: Thu 08 May 2025 19:51:14 +0000 Manifest this update: Thu 08 May 2025 19:46:14 +0000 Manifest next update: Fri 09 May 2025 19:55:14 +0000 Files and hashes: 1: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) 2: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 3: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: VxopdyVEN6zksWfhjTfZTFbVF+4NYT+bdioRNa5wNwM=) 4: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 19:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fe:0f:7a:87:23:30:4a:ab:94:30:4f:5d:fd:07:3c:58:f8:db:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: May 8 19:46:14 2025 GMT Not After : May 9 19:55:14 2025 GMT Subject: CN=ECE196CD35E4824A219CB318F2B2542AB1D6C31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:4d:b6:dc:cd:1b:22:88:3f:c3:77:47:31: ae:3e:6c:21:0e:f5:ab:cd:60:46:3c:e1:2d:64:a7: db:d4:06:4c:53:c5:21:47:52:a8:a5:f0:94:2a:3a: 7a:2b:56:8c:1e:77:69:25:9e:25:56:e5:43:f5:f8: de:e4:94:70:5a:c4:cf:21:5e:fb:a1:ea:5a:48:0e: c9:2b:10:ff:a5:bb:c3:61:cd:e8:7f:b6:0a:b3:c0: 34:82:fc:c1:44:7d:85:1b:f4:67:25:0a:68:e9:73: cb:56:94:b8:68:cb:90:9d:77:34:fe:d5:be:e8:26: e6:ed:8b:b0:5f:08:4a:8e:f9:94:15:7b:57:de:03: f3:b7:50:db:41:68:04:13:bc:52:76:51:12:e9:75: 11:25:fb:39:e0:ec:c6:70:ea:76:c5:00:7f:48:5e: 26:a1:e6:8c:7b:1c:13:14:2c:5f:9b:72:0f:a6:ec: 82:68:2c:59:7d:ce:5f:b1:95:e3:a7:41:7e:02:db: 11:1a:15:02:6c:57:d6:94:ce:29:e5:c0:59:7a:96: 1a:41:0d:f2:7b:9d:bc:f6:c8:6d:06:6f:81:e1:c2: 9b:37:8c:38:f0:dc:db:ca:cb:6c:16:3e:a1:cf:90: 5e:1a:4b:d4:97:38:36:10:7d:a4:e2:bc:56:ba:99: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E1:96:CD:35:E4:82:4A:21:9C:B3:18:F2:B2:54:2A:B1:D6:C3:1C X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:73:22:d5:4b:b1:23:73:7d:3c:d8:49:d8:a0:76:8c:27:8e: 59:54:5d:8f:fe:17:bc:8d:60:fb:f1:18:88:e5:93:f1:45:61: b7:1e:0b:5e:39:81:b4:06:18:10:94:6b:4e:cd:b3:7b:3e:1e: a2:55:cb:13:62:1c:51:3e:8f:63:aa:8e:b5:25:62:1d:22:2c: f1:24:98:23:aa:2a:4e:4c:26:d9:23:89:72:2a:d3:f7:11:d0: 28:44:23:65:83:92:c2:06:a6:09:ec:ef:f6:f9:33:4a:e5:ee: 7b:ef:e9:4a:c2:a8:cb:5e:1a:ac:f2:b6:ae:23:ea:65:57:2b: 01:52:b8:4e:e7:54:0c:a8:6c:a3:f5:44:c5:a7:09:80:fb:dc: a3:37:6e:27:46:58:9c:e1:75:49:8d:8d:bc:58:21:7a:5c:48: 3c:89:08:b4:02:05:2a:10:c4:15:f7:61:fd:47:80:ad:6b:6d: 40:0a:40:6c:cd:58:be:99:cb:ab:ee:1a:db:81:1f:a3:55:46: ea:9f:99:51:58:be:86:f2:99:db:d7:fd:52:49:67:99:ea:01: 63:dd:ec:75:1a:62:bb:45:bd:da:27:2f:4e:d5:99:df:9d:f6: 1c:40:0b:27:d8:c4:c5:1f:f0:b5:04:7a:b4:67:6a:8e:b8:37: 6a:9d:39:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHP4PeocjMEqrlDBPXf0HPFj427swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTA1MDgxOTQ2MTRaFw0yNTA1MDkxOTU1MTRaMDMxMTAvBgNV BAMTKEVDRTE5NkNEMzVFNDgyNEEyMTlDQjMxOEYyQjI1NDJBQjFENkMzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8C0223M0bIog/w3dHMa4+bCEO 9avNYEY84S1kp9vUBkxTxSFHUqil8JQqOnorVowed2klniVW5UP1+N7klHBaxM8h Xvuh6lpIDskrEP+lu8Nhzeh/tgqzwDSC/MFEfYUb9GclCmjpc8tWlLhoy5CddzT+ 1b7oJubti7BfCEqO+ZQVe1feA/O3UNtBaAQTvFJ2URLpdREl+zng7MZw6nbFAH9I Xiah5ox7HBMULF+bcg+m7IJoLFl9zl+xleOnQX4C2xEaFQJsV9aUzinlwFl6lhpB DfJ7nbz2yG0Gb4Hhwps3jDjw3NvKy2wWPqHPkF4aS9SXODYQfaTivFa6mS41AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7OGWzTXkgkohnLMY8rJUKrHWwxwwHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACnMi1UuxI3N9PNhJ2KB2jCeOWVRdj/4XvI1g+/EYiOWT8UVhtx4LXjmBtAYY EJRrTs2zez4eolXLE2IcUT6PY6qOtSViHSIs8SSYI6oqTkwm2SOJcirT9xHQKEQj ZYOSwgamCezv9vkzSuXue+/pSsKoy14arPK2riPqZVcrAVK4TudUDKhso/VExacJ gPvcozduJ0ZYnOF1SY2NvFghelxIPIkItAIFKhDEFfdh/UeArWttQApAbM1YvpnL q+4a24Efo1VG6p+ZUVi+hvKZ29f9UklnmeoBY93sdRpiu0W92icvTtWZ3532HEAL J9jExR/wtQR6tGdqjrg3ap05oA== -----END CERTIFICATE-----Generated at Fri May 9 08:24:26 2025 by rpki-client